build the package unsigned, then use `debsign` to sign it, then upload it

no need to also set what is already the default for a long time.

This makes it a lot easier to read when there are a lot of them. Also
alpha-sorted for quick reference.